Business Impact Analysis
Objectives
The purpose of the business impact analysis (BIA) is to identify which business units/departments and processes are essential to the survival of ______. The BIA will identify how quickly essential business units and/or processes have to return to full operation following a disaster situation. The BIA will also identify the resources required to resume business operations.
Business impacts are identified based on worst-case Scenario that assumes that the physical infrastructure supporting each respective business unit has been destroyed and all records, equipment, etc. are not accessible for 30 days. Please note that the BIA will not address recovery solutions.
The objectives of the BIA are as follows:
· Estimate the financial impacts for each business unit, assuming a worst case scenario.
· Estimate the intangible (operational) impacts for each business unit, assuming a worst-case scenario.
· Identify the organization’s business unit processes and the estimated recovery time frame for each business unit.
Policy
Each Facility Business Continuity Planner shall perform a BIA on all business processes to determine the criticality of these processes to ______and to determine what the impacts are to the organization if those processes were interrupted. It shall identify the business process availability Recovery Time Objectives (RTOs), business process Recovery Point Objectives (RPOs), key business processes and the associated risks if these processes were not available.
Scope
Each Facility within ______. should have a Business Impact Analysis which includes each department and process located within the facility.
Business Impact Analysis Scores
The following number scores have been established to provide firm tangible and intangible exposure categories for cross-company comparison.
Cumulative Dollar Loss Ranges (Tangible)
Score / Loss Range0 / none
1 / < $1,000
2 / ≥ $1,000 < $5,000
3 / ≥ $5,000 < $10,000
4 / ≥ $10,000 < $25,000
5 / ≥ $25,000 < $50,000
6 / ≥ $50,000 < $100,000
7 / ≥ $100, 000 < $150,000
8 / ≥ $150,000 < $250,000
9 / ≥ $250,000 < $500,000
10 / ≥ $500,000
Customer Service and Goodwill Loss Ranges (Intangible)
Score / Effect0 / None
2 / Minimal
4 / Moderate
6 / Moderately Heavy
8 / Heavy
10 / Severe
Definitions
Impact Category / DefinitionLoss of Revenue / Loss of income received from selling goods or services
Additional Expenses / Temporary staffing, overtime, equipment, services
Regulatory and Legal / Fines, penalties, compliance issues, contractual obligations, financial liabilities
Customer Service / Termination or reduction of service level (internal of external), live operators vs. automated response
Goodwill / Public image, shareholder relations, market share
Business Impact Analysis Questionnaire
Business Unit/Department Name:
Description of Business Unit/Department’s Purpose in the Organization:
Name of Unit/Department’s Manager/Director:
In the followings table, list the business processes performed by the Business Unit/Department
1.2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
For each business process listed above, fill out a questionnaire sheet.
Completed by: Date:
Business Impact Analysis Questionnaire
Business Unit/Department Name:
Business Process Name:
Business Function Description:
1. Does this Function have to be performed at a specific time of the day/week/month/year?
2. Using the Impact categories to classify the type of loss incurred and the Loss ranges (0 through 10) specify your estimated amount of exposure during each time period below:
Cumulative Impact after Days:Impact Category / 1 / 3 / 5 / 10 / 20 / 30
Loss of revenue
Additional expenses
Regulatory and legal
Customer service
Goodwill
3. Is this function dependent on any technology (hardware or software):
4. Does this function depend on any outside services or products for its successful completion?
5. What is the maximum amount of time this business process could be unavailable?
Completed by: Date: